$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65f79864-e0ff-321e-8474-f77e52537e64.roa File: 65f79864-e0ff-321e-8474-f77e52537e64.roa (raw, json) Hash identifier: 47TslYgGakhJbKcngrBGFLmWO2TVE1Q+/UP0QMfQqbQ= Subject key identifier: 2B:63:9E:16:5E:21:8B:28:1D:66:66:F0:03:67:3B:2C:D0:76:D9:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA22ACB21BF567011DB380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65f79864-e0ff-321e-8474-f77e52537e64.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.189.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:22:ac:b2:1b:f5:67:01:1d:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=edf49fd7-6707-42c1-b3b3-2a2625187996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:9a:99:da:cf:b7:d9:72:dc:7d:b6:5e:94: 98:75:c6:29:aa:44:a1:98:cc:19:73:bb:6a:4c:0e: 31:43:33:fc:a2:e7:72:af:93:56:c0:8d:b8:8b:2f: aa:02:f0:9f:84:37:f6:b9:ca:fb:d0:67:59:23:05: 86:93:23:30:dd:2e:e4:38:1f:59:73:23:eb:3c:49: ca:1b:af:e3:0b:8d:22:a8:ab:a5:e9:14:87:61:89: a7:8d:23:04:78:12:5c:a7:00:f2:c7:f7:c2:d4:56: 35:34:92:a1:fd:c4:98:bb:8f:63:50:6a:a2:6d:90: cd:18:d3:4e:62:02:58:ca:03:0d:cb:bb:ad:bd:fb: 50:15:68:37:c7:89:22:5c:b5:1b:3d:ad:5a:9e:63: fb:61:22:96:8c:0f:ee:be:16:a1:9b:66:8a:35:b5: f9:79:40:1a:5a:4a:5a:4e:dd:72:4a:f9:43:f9:bf: 86:dc:c4:78:e3:6e:ac:2c:d6:f8:e6:3e:e0:f4:a6: a3:d7:d1:ce:be:fc:d4:5a:a2:7d:80:73:17:8c:de: 60:9c:a2:09:51:69:16:86:bb:6d:d3:99:f0:71:f1: d3:38:77:2f:a1:34:e6:82:1f:13:0a:c1:8b:5f:3b: 47:64:24:3f:f5:9c:55:1b:1e:c4:0a:70:ec:51:fc: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:9E:16:5E:21:8B:28:1D:66:66:F0:03:67:3B:2C:D0:76:D9:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65f79864-e0ff-321e-8474-f77e52537e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4c:9f:d3:a7:e8:ff:a7:b1:08:b7:e3:28:4e:62:4e:9f:23: eb:1a:74:f8:d9:d1:f7:5c:cc:ef:31:da:6c:f8:e8:06:ed:7d: 2f:36:c3:4a:6d:bd:39:bf:78:95:7e:ae:b9:9a:a4:f5:c9:c2: aa:9c:0b:58:76:7a:3e:28:61:ab:6c:c5:c5:03:f7:7b:f2:c7: 2a:f0:4b:cb:1c:80:b0:5f:dd:e2:13:ca:09:5c:55:13:c1:38: d1:f1:32:97:03:41:fe:e6:a5:a9:ea:60:ac:cf:b9:31:35:aa: 02:1b:b0:27:66:a2:b9:40:28:14:6b:a0:13:52:f0:07:8f:ce: a8:9c:df:91:2b:a7:0e:46:08:f2:7e:2b:73:5b:22:ff:04:78: 8a:16:e9:76:3d:f0:5d:8a:ac:f9:d4:55:0b:e0:f2:4a:18:5c: 5d:9a:81:f0:3c:23:58:23:a0:06:86:14:f9:84:fd:07:b7:51: 25:63:b8:81:33:6e:ad:b3:b7:ea:fe:dd:46:7e:0e:5f:0f:33: e0:bf:12:c9:ca:24:fa:22:29:31:01:2d:cb:79:12:6f:db:d0: 7d:7e:fa:80:63:9e:ea:e1:73:52:bf:1a:d7:4f:e5:e9:18:4a: 68:e5:2b:1a:fb:51:5a:f6:09:c0:4e:1e:5a:fa:b9:12:b9:8a: fe:61:8b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiKsshv1ZwEds4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZWRmNDlmZDctNjcwNy00MmMxLWIzYjMtMmEyNjI1MTg3OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPqamdrPt9ly3H22XpSYdcYpqkShmMwZc7tq TA4xQzP8oudyr5NWwI24iy+qAvCfhDf2ucr70GdZIwWGkyMw3S7kOB9ZcyPrPEnK G6/jC40iqKul6RSHYYmnjSMEeBJcpwDyx/fC1FY1NJKh/cSYu49jUGqibZDNGNNO YgJYygMNy7utvftQFWg3x4kiXLUbPa1anmP7YSKWjA/uvhahm2aKNbX5eUAaWkpa Tt1ySvlD+b+G3MR4426sLNb45j7g9Kaj19HOvvzUWqJ9gHMXjN5gnKIJUWkWhrtt 05nwcfHTOHcvoTTmgh8TCsGLXztHZCQ/9ZxVGx7ECnDsUfzZswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtjnhZeIYsoHWZm8ANnOyzQdtktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjVmNzk4NjQtZTBmZi0z MjFlLTg0NzQtZjc3ZTUyNTM3ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExMn9On6P+nsQi34yhOYk6fI+sadPjZ0fdczO8x2mz46AbtfS82w0pt vTm/eJV+rrmapPXJwqqcC1h2ej4oYatsxcUD93vyxyrwS8scgLBf3eITyglcVRPB ONHxMpcDQf7mpanqYKzPuTE1qgIbsCdmorlAKBRroBNS8AePzqic35Erpw5GCPJ+ K3NbIv8EeIoW6XY98F2KrPnUVQvg8koYXF2agfA8I1gjoAaGFPmE/Qe3USVjuIEz bq2zt+r+3UZ+Dl8PM+C/EsnKJPoiKTEBLct5Em/b0H1++oBjnurhc1K/GtdP5ekY SmjlKxr7UVr2CcBOHlr6uRK5iv5hi1Q= -----END CERTIFICATE-----Generated at Tue Jul 1 00:29:26 2025 by rpki-client